Privacy Policy

pursuant to Article 13 of the General Data Protection Regulation (GDPR) and § 32 of the Federal Data Protection Act 2018

Thank you for showing an interest in our website. Protecting your privacy is of the utmost importance to us. The following provides detailed explanations on how we handle your personal data.

Privacy is a matter of trust and your trust is important to us. Therefore, when processing your personal data we observe the legal regulations strictly.

With this privacy policy, we inform you of the extent to which we collect, store, process and evaluate personal data and other information. Also the handling is explained heret.

This applies to our websites:

- www.ungerglobal.com
- www.my-unger.com
- www.ungerglobal.com/clean-magazine/en

Would you like to know exactly?

In the first part of our privacy policy, we have made every effort to explain things clearly and simply so that you can obtain an overview as quickly as possible.

In the second part you will find a more detailed explanation regarding data protection issues. Should any questions still remain unanswered, please contact our data protection officer, who will be pleased to assist you.

1. Privacy policy (short version)

Who is responsible and who is assigned to data protection at Unger Germany GmbH?

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

- Company: Unger Germany GmbH
- Managing Director: Mark. D. Unger, Jan D. Unger, Torsten Deutzmann
- Address: Piepersberg 44, 42653 Solingen
- Email: ungereurope@ungerglobal.com
- Telephone: 0212 / 22 07 - 0

Contact data of the data protection officer within the meaning of the GDPR:

- Email: dpo.unger-europe@fgnd-core.de
- Address: Kelvinstr. 14, 50996 Köln
- Website: www.fgnd-core.de
- Telephone: 02236 / 490 90 80

For all questions and suggestions regarding data protection, you can always contact our data protection officer directly.

To what extent and for what purpose are my data processed?

You can visit our website without actively providing any information about yourself. Personal data are collected by us, if you voluntarily provide us with them as part of your order, when opening a customer account or when registering for the newsletter. We store your data for the processing of your orders and any possible warranty claims as well as for advertising purposes.

Your order is stored by us internally. This includes, for example, surname, first name, billing address, shipping address, telephone number, account information and email. These data which are required for the business transaction are stored and, if necessary as part of the order processing are passed on to our affiliated companies or our service partners, who work for us as a processor within the meaning of the Federal Data Protection Act.

Of course, all personal data shall be treated strictly confidentially and your legitimate concerns shall be strictly taken into account in accordance with the legal requirements.

A transfer of your personal data shall take place exclusively according to Article 6 paragraph 1 lit. b of the GDPR to service providers (processors) used by us in the execution of the contract (e.g. transport companies or banks).

How long will my data be stored?

The data collected regarding you will be stored by us for the duration of the business relationship, taking into account existing retention periods.

Deletion of user accounts

Unger Germany GmbH reserves the right to irrevocably delete your user account as well as your data without giving reasons.

What rights do I have?

You have the right to request information about your personal data stored by us. If your data is incorrect, incomplete or irrelevant, we shall correct or delete it on request. You have the possibility to obtain a written summary of the personal data contained in our records. You can request this document in writing from Unger Germany GmbH. Furthermore, you have the right at any time to withdraw your consent to the use of your data for promotional purposes, such as the sending of catalogues, newsletters or offers. Please contact us by post at Unger Germany GmbH, Marketing, Piepersberg 44, 42653 Solingen, Germany or by email at: mailing@unger-europe.com

In addition, you have the right to complain to a supervisory authority. Corresponding addresses can be found on the websites of the Federal Commissioner for Data Protection and Freedom of Information: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Email advertising, newsletters and market research

If you have registered separately for the newsletter or by means of other registration forms, your email address shall be used for our own advertising purposes, market research, needs based design and individual marketing of products and services, until you unsubscribe from the newsletter or write to Unger Germany GmbH, Marketing , Piepersberg 44, 42653 Solingen, Germany. Cancellation is possible at any time without incurring any costs other than the transmission costs according to the basic rates of your service provider.

Contact form

If you use the contact form to contact Unger Germany GmbH, your personal data will be transmitted SSL-encrypted to us and automatically stored for the purposes of processing or contacting us. No disclosure of this personal data to third parties is carried out.

Newsletter order

If you wish to subscribe to our newsletter, in addition to your email address we will need your confirmation and consent that you agree to receive the newsletter. These data are collected only for the purpose of being able to send you the newsletter and to document our authorisation in this regard. Your data shall not be disclosed to any third parties.

You have the right to withdraw your consent at any time. All you need to do is send an email to Unger Germany GmbH at ungereurope@ungerglobal.com. Alternatively, you can click on a corresponding link in the newsletter to unsubscribe from the newsletter.

The withdrawal shall be effective as of receipt by Unger Germany GmbH, meaning that it does not affect the validity of the consent prior to then. If you object or unsubscribe to the newsletter, we shall not process your personal data further and shall delete it immediately.

Use of Cookies

On our website we use so called cookies. Cookies are small text files that are stored on your data carrier and that via your browser store certain settings and data for exchange with our system. This storage helps us to personalise the website for you and makes it easier for you to use it, for example by saving certain input from you so that you do not have to repeat it constantly. Your browser allows you to restrict the use of cookies, although this may mean that our offer will no longer work for you or will only work in a restricted way. Cookies can be deleted there too.

We use:

Session cookies

Session cookies are deleted after closing your browser.

Long term cookies

We use cookies that remain on your hard drive. For your convenience, the expiration time is set for a date in the future. On a subsequent visit, it will automatically be recognised that you were already on our website and what inputs and settings you prefer (so called long term cookies).

Data security

We secure our website and other systems by means of technical and organisational measures against loss, destruction, access, modification and processing of your data by unauthorised persons. You should always keep your access credentials secret and close the browser window when you have finished communicating with us, especially if you share your computer with others.

Your data shall never be forwarded, sold or exchanged by us to third parties for advertising purposes outside Unger Germany GmbH. The transfer of data to third parties, for example to suppliers in the context of the shipping process, serves solely to fulfil our obligations to you.

How do we protect your data?

We have taken technical and organisational precautions to protect your data from loss, manipulation or unauthorised access by third parties. We regularly adapt our security measures to technical development. For your security, we encrypt your data using the Secure Socket Layer (SSL) procedure.

Analysis tools for our statistics

Google Analytics (EU-US Privacy Shield certified)

This website uses Google Analytics, a web analysis service from Google Inc. ("Google"). Google Analytics uses so called “Cookies” which are text files that are stored on your computer and enable an analysis of how you use the website. The information generated by the cookie on how you use our website is usually transferred to a Google server in the USA and stored there. If IP anonymisation is enabled on this website, your IP address will be truncated by Google if it is located within the member states of the European Union or other countries party to the agreement regarding the European Economic Area. Only in exceptional cases the full IP address is sent to a Google server in the US and abbreviated there. Google uses this information on behalf of the operator of this website to evaluate how you use our website, in order to compile reports concerning the website activities and to provide other services connected to the use of the website and the use of the Internet for the website operator. The IP address transmitted by your browser as part of Google Analytics shall not be merged with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings in your browser. However, please be advised that if you opt out of using cookies, you may not be able to fully use all the features of this website. In addition, you can prevent Google from collecting the data on your use of the website (including your IP address) generated by the cookie, and also prevent the processing of this data by Google by downloading and installing the available browser plugin. For more information, see the Google privacy policy, which you can access here: https://policies.google.com/privacy?hl=de

Overheat

This website uses overheat.de, a web analysis tool of the company “overheat UG (haftungsbeschränkt)” with registered office in Haus Alsbach 2, 51766 Engelskirchen, Germany. Interactions of randomly selected, individual visitors with the website are recorded by this anonymously. In this way, a log is created of e.g. mouse movements and clicks with the aim of showing ways to improve our website. Additionally, information about the operating system, browsers, incoming and outgoing links, geographic origin, as well as the resolution and type of terminal are evaluated for statistical purposes. This information is not personal and shall not be disclosed to third parties by overheat.de. If you do not want any recording, you can disable it on all websites using overheat by setting the DoNotTrack header in your browser. Information regarding this can be found on the following page: http://overheat.de/opt-out.html

Creation of pseudonymous user profiles for web analysis

This website collects and stores data that is generated using anonymous non-personal usage profiles. These usage profiles are used to analyse visitor behaviour and are evaluated to improve and better tailor our products to your needs. Cookies can be used for this purpose. These are small text files stored locally on the computer of the visitor to the website to facilitate recognition again when our website is revisited. The pseudonymous usage profiles are not combined with personal data concerning the user of the pseudonym without the express consent of the data subject, which is to be granted separately. You may object to the collection and storage of data for the purpose of web analysis at any time with future effect by contacting us at the contact details below. We do not carry out profiling with your data in the sense of Article 4 of the GDPR.

External elements on our website

 

Google Maps

On individual pages of our website, we have included an application programming interface (API) from Google Maps to help you locate our facilities in Solingen, United Kingdom, or Bridgeport U.S.A. This data is transmitted from your device to Google. As Google has been certified with the EU-US Privacy Shield, data will be transferred to the US on the basis of an adequacy decision pursuant to Article 45 of the GDPR. For more information, see the Google privacy policy, which you can access here: https://policies.google.com/privacy?hl=de

Googleadservices

This website uses "Googleadservices pagead aclk" This is a tracking service provided by Google, which collects information about which ads you click on and helps protect our site from click fraud. As Google has been certified with the EU-US Privacy Shield, data will be transferred to the US on the basis of an adequacy decision pursuant to Article 45 of the GDPR. For more information, see the Google privacy policy, which you can access here: https://policies.google.com/privacy?hl=de

YouTube

This website uses so called social plugins ("plugins") of the video portal YouTube, which is operated by YouTube LLC. The plugins are marked with a YouTube logo.

If you access a page of our website containing this plugin, your browser will establish a direct link to the YouTube servers. The content of the plugin is transmitted by YouTube directly to your browser and incorporated by the latter into the website.

Through the integration of the plugins, YouTube receives the information that your browser has accessed the corresponding page of our website, even if you do not have a YouTube channel or are currently not logged in to YouTube. This information (including your IP address) is sent directly by your browser to a YouTube server in the USA, and stored there.

If you are logged in to YouTube, YouTube can directly link the visit to our website to your YouTube channel. If you interact with the plugins, for example using the “Like” button or by posting a comment, the corresponding information will also be sent immediately to a YouTube server and saved there. The information will also be posted on YouTube and displayed to your YouTube friends.

YouTube can use this information for advertising purposes, market research and requirements based design of the YouTube pages. To do this, YouTube creates usage, interest and relationship profiles, for example to evaluate your use of our website for advertisements displayed on YouTube, to inform other YouTube users about your activities on our website, and to provide other services related to the use of YouTube.

If you do not want YouTube to associate the data collected through our website with your YouTube account, you must log out of YouTube prior to visiting our website.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for the protection of your privacy can be found in the Youtube privacy policy: https://policies.google.com/privacy?hl=de&gl=de

LiveChat

We have implemented a LiveChat plug-in on our sites, provided by LiveChat Inc., One International Place, Suite 1400, Boston, MA 02110-2619, USA. If you want to contact us in this way, it is necessary to log in to the chat. The requested data such as name and email address will be transmitted to livechatinc.com, who acts as a processor for us. As LiveChat has been certified with the EU-US Privacy Shield, data will be transferred to the US on the basis of an adequacy decision pursuant to Article 45 of the GDPR. For more information, see the LiveChat privacy policy, which you can access here: https://www.livechatinc.com/privacy-policy. For consideration of the GDPR through LiveChat, please read the relevant notes: https://www.livechatinc.com/general-data-protection-regulation

Personal data that you submit to us via the LiveChat function will not be stored additionally, unless you submit requests to us that require storage for further processing. As soon as this purpose and possible statutory retention periods expire, your data shall be deleted.

Social Media

Facebook profile

If you visit the Facebook profile of Unger Germany GmbH (https://www.facebook.com/ungergermany), we shall not collect any personal data from you, unless you post on our Facebook profile, comment on posts on our Facebook profile, use the Like feature, write us a Facebook message, or use other Facebook offers to connect interactively to our Facebook profile. In these cases, you will disclose your username, profile photo, and any other information publicly disclosed on your Facebook profile. We shall not store any of these data additionally unless you submit requests to us that require storage for further processing. As soon as this purpose and possible statutory retention periods expire, your data shall be deleted.

We do not have any influence on the processing of your data by Facebook itself. To find out more, please read the Facebook privacy policy: https://www.facebook.com/policy.php

Instagram profile

If you visit the Instagram profile of Unger Germany GmbH (www.instagram.com/ungereurope), we shall not collect any personal data from you, unless you comment on posts on our Instagram profile, use the Like feature, write us an Instagram message or use other Instagram offers to connect interactively to our Instagram profile. In these cases, you will disclose your username, profile photo, and any other information publicly disclosed on your Instagram profile. We shall not store any of these data additionally unless you submit requests to us that require storage for further processing. As soon as this purpose and possible statutory retention periods expire, your data shall be deleted.

We do not have any influence on the processing of your data by Instagram itself. To find out more, please read the Instagram privacy policy: https://help.instagram.com/155833707900388

YouTube channel

If you visit the YouTube channel of Unger Germany GmbH (https://www.youtube.com/user/UNGEReurope), we shall not collect any personal data from you, unless you comment on posts on our YouTube channel, use the Like feature, write us a YouTube message, or use other YouTube offers to connect interactively to our YouTube channel. In these cases, you will disclose your username, profile photo, and any other information publicly disclosed on your YouTube channel. We shall not store any of these data additionally unless you submit requests to us that require storage for further processing. As soon as this purpose and possible statutory retention periods expire, your data shall be deleted.

We do not have any influence on the processing of your data by YouTube itself. To find out more, please read the YouTube privacy policy: https://www.youtube.de/t/privacy

Google-Plus profile

If you visit the Google Plus profile of Unger Germany GmbH (http://plus.google.com/+UngerGermanyOFFICIAL), we shall not collect any personal data from you, unless you comment on posts on our Google Plus profile, use the Like feature, write us a Google Plus message, or use other Google Plus offers to connect interactively to our Google Plus profile. In these cases, you will disclose your username, profile photo, and any other information publicly disclosed on your Google Plus profile. We shall not store any of these data additionally unless you submit requests to us that require storage for further processing. As soon as this purpose and possible statutory retention periods expire, your data shall be deleted.

We do not have any influence on the processing of your data by Google Plus itself. To find out more, please read the Google Plus privacy policy: https://www.google.com/intl/en/help/terms_maps.html?hl=de

Twitter profile

If you visit the Twitter profile of Unger Germany GmbH (www.twitter.com/UngerGermany), we shall not collect any personal data from you, unless you comment on posts on our Twitter profile, use the Like feature, write us a Twitter message, or use other Twitter offers to connect interactively to our Twitter profile. In these cases, you will disclose your username, profile photo, and any other information publicly disclosed on your Twitter profile. We shall not store any of these data additionally unless you submit requests to us that require storage for further processing. As soon as this purpose and possible statutory retention periods expire, your data shall be deleted.

We do not have any influence on the processing of your data by Twitter itself. To find out more, please read the Twitter privacy policy: https://help.twitter.com/de/rules-and-policies/update-privacy-policy

2. Privacy policy (comprehensive version)

2.1 Data processing

2.1.1 General information regarding the use of the homepage

A use of the internet pages of Unger Germany GmbH is possible in principle without the active indication of personal data. Insofar as a data subject wishes to use the special services of our company through our website (for example, using the contact form), personal data may be required to be processed. If the processing of personal data is necessary and there is no legal basis for such processing, we shall obtain consent from the data subject.

The processing of personal data, such as the name, address, email address or telephone number of a data subject shall always be in accordance with legal requirements.

Unger Germany GmbH as the controller has implemented numerous technical and organisational measures to ensure the most comprehensive as possible protection of personal data processed via this website. Nevertheless, internet based data transmission can still be subject to vulnerabilities, meaning that absolute protection can not be guaranteed. For this reason, each data subject is free to provide us with personal data via alternative means, for example by telephone.

2.1.2 Contact possibilites via the website

Due to legal regulations, the website of Unger Germany GmbH contains information that enables fast electronic contact with our company as well as direct communication with us. Insofar as the data subject contacts the party responsible for the data processing by email or through a contact form, the personal data provided by the data subject shall be automatically saved.

Such personal data transmitted to us by a data subject on a voluntary basis shall be stored for the purpose of processing or contacting the data subject. No disclosure of this personal data to third parties is carried out. The erasure of this data shall be carried out according to purpose, unless legal or official storage obligations are involved.

2.1.3 Routine erasure and blocking of personal data

We process and store personal data of the data subject only for the period necessary for the achievement of the processing purpose or if this is provided for in the GDPR or laws or regulations.

If the processing purpose concludes or a legal storage period expires, the personal data shall be routinely deleted and in accordance with the legal requirements.

2.1.4 Legal basis of data processing

Article 6 1 a of the GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfil a contract of which the person concerned is a party, the processing is based on Article 6 1 b of the GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services.

If our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfilment of tax obligations, the processing is based on Article 6 1 c of the GDPR. In rare cases, the processing of personal data may be required to protect vital interests of the data subject or another natural person, such as would be the case in accidents on the business premises.

In addition, processing operations could be based on Article 6 1 f of the GDPR if the processing is necessary to safeguard the legitimate interests of our company or a third party, insofar as the interests, fundamental rights and fundamental freedoms of the data subject do not prevail. The legitimate interest in particular includes efficient, customer friendly and high quality provision of service.

2.1.5 Data protection in applications and in the application process

We collect or process the personal data of applicants for the purpose of processing the application procedure. The processing can also be done electronically. This is particularly the case if an applicant submits corresponding application documents by electronic means, for example by email, to the party responsible for the processing. If the party responsible for the processing concludes a contract of employment with an applicant, the data transmitted shall be stored for the purposes of the employment relationship in accordance with the law. If no contract of employment with the candidate is concluded by the party responsible for processing, the application documents shall be deleted after no later than six months.

2.2 Rights of the data subject

Data subjects according to the GDPR are entitled to the following rights. If the data subject wishes to exercise the right to information, he/she may at any time contact our data protection officer or another employee of the controller.

2.2.1 Right to withdraw consent under data protection law

As a data subject in the processing of personal data, you have the right to withdraw your consent to the processing of your personal data at any time with future effect. To do so, an email or other declaration in text form shall be sufficient. You can direct your withdrawal in writing to: ungereurope@ungerglobal.com

2.2.2 Right to information

As a data subject of the processing of personal data, you have the right at any time to obtain free information from the party responsible for processing about your personal data which is stored and to receive a copy of your personal data. The right to information concerns the following information:

- the purposes of processing
- the categories of personal data processed
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
- if possible, the planned duration for which the personal data shall be stored or, if this is not possible, the criteria for determining such duration
- the right to correct or delete personal data concerning the data subject or to restrict the processing by the controller or a right of withdrawal to such processing
- the right of appeal to a supervisory authority
- if the personal data is not collected from the data subject: All available information on the origin of the data
- the existence of automated decision making including profiling according to Article 22 1 and 4 of the GDPR and, at least in these cases, meaningful information regarding the logic involved and the scope and intended effect of such processing with respect to the data subject

Furthermore, the data subject also has the right to know whether personal data has been transferred to a third country or to an international organisation. In such a case, you are also entitled to obtain information on the relevant guarantees in connection with the transmission.

2.2.3 Right to rectification

As a data subject of the processing of personal data, you have the right to demand the immediate correction of incorrect personal data concerning you You also have the right to request the completion of incomplete personal data, including by means of a supplementary statement, taking into account the purposes of processing.

2.2.4 Right to erasure ("Right to be forgotten")

As the data subject of the processing of personal data, you have the right to request that the personal data concerning you be deleted without delay, provided that one of the following reasons is satisfied and the processing is not required

- The personal data was collected for such purposes or otherwise processed for which they are no longer necessary (the data is no longer needed).
- The data subject withdraws his or her consent to the processing of personal data in accordance with Article 6 1 a of the GDPR or Article 9 2 a of the GDPR and there is no other legal basis for processing.
- The data subject lodges an objection against the processing of data pursuant to Article 2 1 1 of the GDPR and there are no overriding legitimate reasons for processing, or the data subject lodges an objection against the processing of data pursuant to Article 2 1 2 of the GDPR.
- The personal data was processed illegally.
- Erasure of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States, to which the controller is subject.
- The personal data were collected in relation to information society services offered pursuant to Article 8 1 of the GDPR.

If the personal data of Unger Germany GmbH were made public and our company as the controller is obligated in accordance with Article 17 1 of the GDPR to the erasure of personal data, we shall take appropriate measures taking into account the available technology and implementation costs, we shall take reasonable steps to notify other data controllers who process the published personal data, in particular to delete all links to such personal data or copies or replications of such personal data, insofar as the processing is not required. The data protection officer of Unger Germany GmbH or another employee, shall make the necessary arrangements for individual cases.

2.2.5 Right to restriction of processing

As a data subject of the processing of personal data, you have the right to request the restriction of processing if one of the following conditions is met:

- The correctness of the personal data is contested by you for a period of time that enables the controller to verify the correctness of the personal data.
- The processing is unlawful, you object to the erasure of personal data and instead demand that the use of personal data be restricted.
- The controller no longer needs the personal data for the purposes of processing, you however need them to assert, exercise or defend legal claims.
- You have objected to the processing pursuant to Article 2 1 1 of the GDPR and it is not yet clear whether the legitimate grounds of the controller outweigh yours.

2.2.6 Right to data portability

As a data subject of the processing of personal data, you have the right to receive the personal data relating to you which you provided to us in a structured, common and machine readable format. In addition, you have the right to transmit this data to another controller without hindrance from the current controller, insofar as the processing does not conflict with the consent pursuant to Article 6 1 a of the GDPR or Article 9 2 a of the GDPR, that it also does not conflict with a contract pursuant to Article 6 1 b of the GDPR and the processing is performed with the aid of automated procedures, insofar as the processing is not necessary for the performance of a task in the public interest or in the exercise of official authority which was delegated to the party responsible for data processing.

Furthermore, in exercising your right to data portability pursuant to Article 20 1 of the GDPR, you have the right to demand that the personal data be transmitted directly by us to a controller, insofar as this is technically feasible and insofar as this does not affect the rights and freedoms of other persons.

2.2.7 Right to object

As a data subject of the processing of personal data, you have the right, at any time for reasons arising from your particular situation, to object to the processing of personal data concerning you which takes place in order to safeguard a legitimate interest of the controller.

This also applies to profiling based on these provisions, whereby Unger Germany GmbH points out that no profiling is carried out.

Unger Germany GmbH shall no longer process personal data in the case of an objection unless we can prove compelling security reasons for such processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

Unger Germany GmbH processes personal data to carry out direct advertising, therefore the data subject has the right at any time to object to the processing of personal data for the purpose of such direct advertising. This also applies to profiling insofar as it is associated with such direct advertising. If you object to Unger Germany GmbH about the processing for direct marketing purposes, we shall no longer process your personal data for such purposes.

2.2.8 Automated individual decision making including profiling

As a data subject of the processing of personal data, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, insofar as the decision

(1) is not necessary for the conclusion or performance of a contract between you and the controller or
(2) is permitted by Union or Member State legislation to which the controller is subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and legitimate interests, or
(3) is performed with your express consent.

With regard to the processing of personal data, Unger Germany GmbH does not use purely automated decision making systems which have a legal effect on you or significantly affect you in a similar manner.

2.2.9 Right to lodge a complaint with a supervisory authority

As the data subject of the processing of personal data you have the right to complain to a supervisory authority, in particular, in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you is contrary to data protection laws. Corresponding addresses can be found on the websites of the Federal Commissioner for Data Protection and Freedom of Information: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

2.3 Definition of terms

With the development of data protection law, terms have become established that are not always self-explanatory. The explanations in Article 4 of the GDPR are cited in the following extracts:

1. “Personal data” means any information relating to an identified or identifiable natural person (“Data subject”’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
2. “Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
3.  “Restriction of processing” means the marking of stored personal data with the aim of limiting their processing in the future;
4. “Profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;
5. “Pseudonymisation” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person; […]
6. “Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
7. “Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
8. “Recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. Authorities which may receive personal data under Union or national law in connection with a particular investigation task are not considered to be recipients; the processing of such data by said authorities shall be in accordance with the applicable data protection rules in accordance with the purposes of the processing;
9. “Third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;
10. “Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
11. “Personal data breach”’ means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed;